Guides

Set up SAML with Auth0

Step by step: register a SAML application in Auth0, then check the sign-in with ID-Kit.

The steps

1. Dashboard → Applications → Create Application → Regular Web Application, then Addons → SAML2 Web App tab.

2. Application Callback URL = https://app.example.com/saml/acs. In “Settings” (JSON): {"audience": "https://app.example.com/saml/metadata", "logout": {"callback": "https://app.example.com/saml/slo"}}. Enable.

3. Usage tab: copy the "Identity Provider Metadata" link (form https://YOUR-TENANT/samlp/metadata/CLIENT-ID) and paste it into ID-Kit.

Check the sign-in

Start a sign-in, get the SAML response, then paste it into theanalyseur : ID-Kit checks the signature, audience, receiving address and clock.

Common errors

• Auth0: “Callback URL mismatch”
• “Invalid audience” / “Audience restriction”
• “Wrong ACS URL” / “Recipient” / “Destination”